I was given the impression that you could whitelist the fields here for each model as well, and that if you didn't specify any fields, then the whole model was whitelisted.
I would like this clarified - is this, or is this not, the case?
We *need* a whitelist for fields on each model.